CVE-2024-12378

CRITICAL

Arista CloudVision Portal 4.27.0-4.32.1F - Cleartext Transmission of Sensitive Information

Title source: llm
STIX 2.1

Description

On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.

References (1)

Core 1

Scores

CVSS v3 9.1
EPSS 0.0044
EPSS Percentile 34.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-319
Status published
Products (6)
Arista Networks/CloudVision Portal 4.27.0 - 4.27.12M
Arista Networks/CloudVision Portal 4.28.0 - 4.28.12M
Arista Networks/CloudVision Portal 4.29.0 - 4.29.9M
Arista Networks/CloudVision Portal 4.30.0 - 4.30.8M
Arista Networks/CloudVision Portal 4.31.0 - 4.31.6M
Arista Networks/CloudVision Portal 4.32.0 - 4.32.2F
Published May 08, 2025
Tracked Since Feb 18, 2026